Managing network connectivity between cloud computing service endpoints and virtual machines

Abstract

Described herein are systems, methods, and software to enhance connectivity between cloud computing service endpoints and virtual machines. In one implementation, a method of managing data packet addressing in a first namespace includes receiving a data packet at a first interface for the first namespace, wherein the first interface is paired with a second interface of a second namespace. The method also includes identifying if the packet is destined for a service node in an underlay network outside of an overlay network for the second namespace, and if destined for a service node outside of an overlay network for the second namespace, modifying addressing in the data packet to support the underlay network and transferring the data packet over a virtual network interface for the virtual machine.

What is claimed is: 
     
       1. A method of managing data packet addressing in a first namespace of a virtual machine, the method comprising:
 receiving a data packet at a first interface for the first namespace, wherein the first interface is paired with a second interface of a second namespace; 
 determining whether the data packet includes a destination address for a node in an overlay network for the second namespace or the data packet includes a destination address for a service node in an underlay network outside of the overlay network for the second namespace; 
 in response to determining that the data packet includes a destination address for a service node in the underlay network, modifying addressing in the data packet to support the underlay network and transferring the data packet over a virtual network interface for the virtual machine, wherein modifying the addressing in the data packet comprises replacing a first source address in the data packet associated with the overlay network and the second namespace with a second source address associated with the underlay network and the first namespace. 
 
     
     
       2. The method of  claim 1 , wherein the first source address and the second source address comprise internet protocol (IP) addresses. 
     
     
       3. The method of  claim 1  further comprising:
 receiving a return data packet from the service node; and 
 translating the second source address associated with the underlay network to the first source address associated with the overlay network and transferring the return data packet to the second namespace via the first interface. 
 
     
     
       4. The method of  claim 1  further comprising:
 receiving a second data packet at the first interface for the first namespace; 
 determining that the second data packet includes a destination address for a node in the overlay network; and 
 in response to determining that the second data packet includes a destination address for the node in the overlay network, encapsulate the second data packet and transfer the encapsulated data packet. 
 
     
     
       5. The method of  claim 1 , wherein the service node comprises a load balancer. 
     
     
       6. The method of  claim 1 , wherein the service node comprises a container or virtual machine. 
     
     
       7. The method of  claim 1 , wherein the second namespace comprises a root namespace for the virtual machine. 
     
     
       8. An apparatus comprising:
 a storage system; 
 a processing system operatively coupled to the storage system; 
 program instructions stored on the storage system to manage data packet addressing in a first namespace of a virtual machine that, when read and executed by the processing system, direct the processing system to at least:
 receive a data packet at a first interface for the first namespace, wherein the first interface is paired with a second interface of a second namespace; 
 determine whether the data packet includes a destination address for a node in an overlay network for the second namespace or the data packet includes a destination address for a service node in an underlay network outside of the overlay network for the second namespace; 
 in response to determining that the data packet includes a destination address for a service node in the underlay network outside of the overlay network for the second namespace, modify addressing in the data packet to support the underlay network and transfer the data packet over a virtual network interface for the virtual machine, wherein modifying the addressing in the data packet comprises replacing a first source address in the data packet associated with the overlay network and the second namespace with a second source address associated with the underlay network and the first namespace. 
 
 
     
     
       9. The apparatus of  claim 8 , wherein the first source address and the second source address comprise internet protocol (IP) addresses. 
     
     
       10. The apparatus of  claim 8 , wherein the program instructions further direct the processing system to:
 receive a return data packet from the service node; and 
 translate the second source address associated with the underlay network to the first source address associated with the overlay network and transfer the return data packet to the second namespace via the first interface. 
 
     
     
       11. The apparatus of  claim 8 , wherein the program instructions further direct the processing system to:
 receive a second data packet at the first interface for the first namespace; 
 determine that the second data packet includes a destination address for a node in the overlay network; and 
 in response to determining that the second data packet includes a destination address for the node in the overlay network, encapsulate the second data packet and transfer the encapsulated data packet to the node in the overlay network. 
 
     
     
       12. The apparatus of  claim 8 , wherein the service node comprises a load balancer. 
     
     
       13. The apparatus of  claim 8 , wherein the service node comprises a container or virtual machine. 
     
     
       14. The apparatus of  claim 8 , wherein the second namespace comprises a root namespace for the virtual machine. 
     
     
       15. An apparatus comprising:
 one or more non-transitory computer readable storage media; 
 program instructions stored on the one or more non-transitory computer readable storage media to manage data packet addressing in a first namespace of a virtual machine that, when read and executed by a processing system, direct the processing system to at least:
 receive a data packet at a first interface for the first namespace, wherein the first interface is paired with a second interface of a second namespace; 
 determine whether the data packet includes a destination address for a node in an overlay network for the second namespace or the data packet includes a destination address for a service node in an underlay network outside of the overlay network for the second namespace; 
 in response to determining that the data packet is destined for the includes a destination address for a service node in the underlay network outside of the overlay network for the second namespace, modify addressing in the data packet to support the underlay network and transfer the data packet over a virtual network interface for the virtual machine, wherein modifying the addressing in the data packet comprises replacing a first source address in the data packet associated with the overlay network and the second namespace with a second source address associated with the underlay network and the first namespace. 
 
 
     
     
       16. The apparatus of  claim 15 , wherein the first source address and the second source address comprise internet protocol (IP) addresses. 
     
     
       17. The apparatus of  claim 15 , wherein the program instructions further direct the processing system to: receive a return data packet from the service node; and translate the second source address associated with the underlay network to the first source address associated with the overlay network and transferring the return data packet to the second namespace via the first interface.